protect all react page routes besides sign-in page so that a user cannot access them without valid jwt auth